Whistleblower System

The Weckerle GmbH makes this whistleblowing system available to you

Responsible:

Weckerle GmbH

Holzhofstrasse 26
82362 Weilheim

To ensure that our organisation behaves ethically and in accordance with the law, we have set up an internal reporting office in the form of this whistleblower system. This serves to clarify and prevent violations

All employees as well as our business partners (suppliers, customers, etc.) have the opportunity to report violations of laws, the Code of Conduct and guidelines here - even completely anonymously.

On this secure whistleblower page, you can submit a new tip or log into existing tips to view our feedback or resume communication.

The following are important instructions on how to use our whistleblower system:

• All employees as well as our business partners (customers and suppliers) are entitled to submit reports (tips)
• Of course, you can also submit your reports anonymously, i.e. without any personal details that would allow conclusions to be drawn about you. However, the clarification of an infringement may be more effective if you provide your contact details. As a matter of principle, your identity will not be disclosed to persons other than the respective whistleblower, his or her team and any competent departments and agencies that may need to be involved without your express consent (exceptions may apply in particular in the case of official investigations or court proceedings).
• Only the whistleblower and his or her team will be informed of your tip in the first step and will accompany the further essential steps of the clarification. Unauthorised employees have no access to your tip. All information from your tip will be treated strictly confidentially.
• When you submit a tip, you can view the processing status of your tip in your login area. Via this login area, the tip processor and his team also have the possibility to contact you confidentially in case of queries. In addition, you have the possibility to provide further information at any time. You will receive the necessary login data after submitting your tip. These access data (user name and password) are generated automatically. Please remember these access data. This login area is of course also available to you if you submit your tip anonymously. In this case, your anonymity will be preserved.
• The whistleblower system is used to receive tips on violations of laws, the Code of Conduct and the guidelines. For general complaints or questions about our products or the product warranty, please contact us at our general contact address.
• Please only provide references if you are certain that the facts communicated are true. Knowingly untruthful assertions or untrue facts are to be refrained from, as the whistleblower may thereby be liable to prosecution under certain circumstances. In case of doubt, label your hint as an assumption or statement by a third party.
• On receipt of your tip, you will receive a confirmation of receipt in your login area. You will then receive feedback from the whistleblower or his team within a maximum of three months after receipt of the tip about the follow-up measures planned or already taken and the reasons for these follow-up measures (e.g. internal investigations or enquiries). Provided you have entered your e-mail address, you will also be informed of any current processing status by e-mail in your login area.

Please also note our data protection information on the whistleblower system.

____________________

Data protection information

Information for data subjects (whistleblowers) in the case of direct collection (Art. 13 GDPR)

Responsible person:
Weckerle GmbH, Holzhofstraße 26, 82362 Weilheim (Germany),
Telephone: +49 (0)881 9293 0
Legal representatives:
Thomas Weckerle
Data protection officer:
Email: datenschutz@weckerle.com

Information on processing activity:
Purposes of the processing activity:
Fulfillment of the tasks, obligations and rights of the internal reporting office assigned to the internal reporting office by the HinSchG.
Legitimate interests of the person responsible:
The legitimate interest in storing data beyond the statutory deletion date is based on the need to defend against third-party claims that could result from an alleged violation of legal requirements in a procedure.

Legal basis for the processing activity:
The processing is necessary to fulfill a legal obligation in accordance with Article 6 Paragraph 1 Letter c GDPR (in conjunction with Section 10 HinSchG).

upon receipt of a voice message:
Consent is given in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The requirements for consent in accordance with Article 7 Paragraphs 1-4 GDPR are met.

When disclosing information about the identity of the whistleblower for follow-up measures:
Consent is given in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The requirements for consent in accordance with Article 7 Paragraphs 1-4 GDPR are met.

if retained / not deleted:
The processing is necessary to protect the legitimate interests of the person responsible or a third party in accordance with Article 6 Paragraph 1 Letter f of the GDPR and no interests or fundamental rights and freedoms of the data subject outweigh this.

Categories of recipients:
Processor (processor within the meaning of Art. 4 No. 8 GDPR in conjunction with Art. 28 GDPR)
Third parties (external persons who are called in to carry out measures according to the HinSchG:
• Dishes
• Investigating authorities (public prosecutor's office, police)
• Responsible bodies within the meaning of the HinwSchG)
Internal (internal people who are called in to carry out measures according to the HinSchG)
Contractor (processor):
Whistleblower Software ApS (Aarhus C)
Data transfer to a third country:
There is no planned transfer to third countries.

Additional information requirements:
Storage period of personal data:
3 years (deletion after 3 years after completion of the procedure in accordance with Section 18 HinSchG)
Deletion after 3 years after completion of the procedure in accordance with Section 18 HinSchG

Rights of the data subject:
You have a right to information (according to Article 15 GDPR) from the person responsible about the personal data concerning you as well as the right to correction (Article 16 GDPR), deletion (Article 17 GDPR) and Restriction of processing (Art. 18 Para. 1 GDPR). You also have the right to object to processing (Article 21 GDPR) and the right to data portability (Article 20 GDPR).
You have the right to revoke your consent at any time with future effect.
If you would like to exercise your rights, please contact the data protection officer mentioned above.

Right to complain:
You have the right to lodge a complaint with the responsible supervisory authority.

Obligation to provide personal data:
The data subject is obliged to provide the personal data.

Consequences of non-provision:
Reports can also be submitted anonymously, but information about processes and people may be necessary to process the report.

Automated decision making:
There is no automated decision-making or profiling.